Launch draft — not legal advice. This describes, as accurately as possible, what this codebase actually does with data. It is not a substitute for review by counsel for your jurisdiction, your Razorpay merchant obligations, or GDPR/CCPA if applicable. Replace every [bracketed] placeholder before launch.

Privacy Policy

Effective date: [Effective Date] · Last updated: [Last Updated Date]

What we collect

Account email and password (handled by Supabase Auth — we never see your raw password). Profile details you enter in Career Profile (name, target role, contact info, summary, skills). Resume content you create in the builder. Billing status (plan, subscription state, renewal date) when you subscribe to a paid plan.

How we use it

To provide the service — storing and displaying your resumes and profile back to you.
To generate AI writing suggestions — relevant resume text is sent to our AI provider, [OpenAI], solely to produce a rewritten version. We do not send your full profile or billing information.
To process payments — when you subscribe, Razorpay handles your card/UPI details directly; Belongix never receives or stores your payment credentials. We receive only subscription status and payment confirmations from Razorpay.

Where it's stored

Account data, profiles, resumes, and billing status are stored in a Supabase (PostgreSQL) database at [region]. Row-level security restricts every table so you can only ever read your own data. Razorpay processes and stores payment method details under its own security and compliance program (PCI DSS) — Belongix does not have access to your card number, UPI ID, or bank details.

What we don't do

We do not sell your data. We do not show ads. We do not share your resume content with employers, job boards, or any third party other than the AI provider described above, for that specific purpose only.

Your rights

You can request deletion of your account and all associated data (profile, resumes, billing history) from Settings. If you're on an active paid plan, cancel it first — see the Terms for what happens to your subscription on deletion. [Add jurisdiction-specific rights — access, correction, portability, erasure request process — if you have EU/UK/California users.]

Cookies & local storage

Belongix uses browser storage to keep you signed in between visits. Razorpay Checkout may set its own cookies during the payment flow, governed by Razorpay's own privacy policy. [Update this section if you add analytics or marketing cookies.]

Changes to this policy

We may update this policy from time to time; material changes will be reflected by an updated "Last updated" date above.

Contact

Questions about this policy or your data: [privacy@yourcompany.com]